Step 2: Update the Security Administrator Account

The sec_admin account user must have privileges to use the DBMS_RLS packages. User SYS owns this package, so you must log on as SYS to grant these package privileges to sec_admin. The user sec_admin also must have SELECT privileges on the CUSTOMERS table in the OE schema and the EMPLOYEES table in the HR schema.

To grant sec_admin privileges to use the DBMS_RLS package: 

1. Start Database Control.

   See Accessing the Database Home Page for instructions about how to start Database Control.

2. Log in as user SYS and connect with the SYSDBA privilege:

   • User Name: SYS

   • Password: Enter the password for SYS.

   • Connect As: SYSDBA

3. Click Server to display the Server subpage.

4. Under Security, select Users.

   The Users Page appears.

5. Select the SEC_ADMIN user, and in the View User page, click Edit.

   The Edit User page appears.

6. Click Object Privileges to display the Object Privileges page.

7. From the Select Object Type list, select Package, and then click Add.

   The Add Package Object Privileges page appears.

8. Under Select Package Objects, enter SYS.DBMS_RLS so that sec_admin will have access to the DBMS_RLS package.

9. Under Available Privileges, select EXECUTE, and then click Move to move it to the Selected Privileges list.

10. Click OK.

    The Edit User page appears.

11. From the Select Object Type list, select Table, and then click Add.

    The Add Table Object Privileges page appears.

12. In the Select Table Objects field, enter HR.EMPLOYEES so that sec_admin will have access to the HR.EMPLOYEES table.

13. Under Available Privileges, select SELECT, and then click Move to move it to the Selected Privileges list.

14. Click OK.

    The Edit User page appears. It shows that user sec_admin has object privileges for the EMPLOYEES table and DBMS_RLS PL/SQL package. Ensure that you do not select the grant option for either of these objects.

15. Click Apply.

    All the changes you have made, in this case, the addition of the two object privileges, are applied to the sec_admin user account.